1. Who we are
Arsnovaa Studio is a Google Ads operations system operated by Arsnovaa Studio (“we,” “us,” or “our”). It is used by an authorized agency operator to review advertising performance, synchronize approved account data, and prepare controlled recommendations.
2. Information we access
When an authorized user connects Google, we may receive:
- the user’s Google account email address;
- OAuth authorization and refresh tokens;
- Google Ads customer and manager account identifiers;
- account settings, campaign structure, budgets, keywords, ads, status, and policy information; and
- advertising performance metrics such as impressions, clicks, cost, and conversions.
Arsnovaa Studio does not request Gmail, Google Drive, contacts, or general Google profile data beyond the email identity required to identify the authorizing operator.
3. How we use Google user data
Google user data is used only to provide and secure Arsnovaa Studio functions requested by the authorized operator: account discovery, read-only reporting, diagnostics, recommendations, approval workflows, auditing, and—only if separately enabled and approved—controlled Google Ads actions.
4. Google API Services User Data Policy
Arsnovaa Studio’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
5. Storage and security
Production secrets are stored in access-restricted server configuration. OAuth refresh tokens are encrypted at rest. The application and database listen only on private local interfaces behind HTTPS. OAuth uses one-time state and PKCE. Sensitive query strings and tokens are excluded from access logs. Database backups are encrypted and retained for up to 30 days.
6. Sharing and processors
We do not sell or rent personal information. Data is disclosed only when necessary to operate the service, comply with law, protect security, or act on the explicit instructions of the authorized account owner. Google Ads data is not shared with unrelated clients.
7. Retention and deletion
OAuth credentials and synchronized Google Ads data are retained while the connection is active and needed for the authorized service. An authorized user may revoke Google access at any time through their Google Account permissions and may request deletion by emailing the privacy contact above. We will remove active credentials and associated account snapshots after verifying the request. Encrypted backup copies expire through the normal retention cycle within 30 days.
8. Your choices
You may decline authorization, revoke access, request access to stored information, correct account details, or request deletion. Revoking access prevents new Google Ads synchronization but does not automatically erase audit records that must be retained for security and accountability.
9. Children and sensitive information
Arsnovaa Studio is a business tool and is not directed to children. It is not designed to store patient records, medical histories, lead health information, or raw personally identifying conversion data.
10. Changes
We may update this policy when the product, legal requirements, or Google API requirements change. The effective date above will be revised when material changes are published.
11. Contact
Questions or privacy requests may be sent to adityalavate1011@gmail.com.